Privacy Policy

KB4 Service GmbH, Schulgasse 37, 1180 Wien, Austria. Email: concierge@arranged.at. Discretion is the core of our service; we process personal data only to the extent necessary.

Contact and identity data: name, email, phone, language, address.

Account data: login credentials, membership level, assigned concierge.

Request and arrangement data: requests, bookings, travel dates, itineraries, companions you name to us.

Preferences you share: vehicles, hotels, airlines, restaurants, dietary needs, room and security preferences.

Financial data: deposits, charges and the ledger of your ARRANGED Balance.

Technical data: IP address, browser, time of access, needed to run the website securely.

Performance of the contract and pre-contractual steps (Art. 6(1)(b) GDPR): handling requests, bookings, the client account and communication.

Legal obligations (Art. 6(1)(c) GDPR): accounting and retention duties under Austrian tax and commercial law.

Legitimate interests (Art. 6(1)(f) GDPR): secure operation of the website and platform, prevention of misuse.

Consent (Art. 6(1)(a) GDPR): where you give it, e.g. for health-related information needed for medical or wellness arrangements (Art. 9(2)(a) GDPR). Consent can be withdrawn at any time.

To carry out an arrangement, we pass on only the data strictly required to the chosen partner (e.g. chauffeur, hotel, restaurant, aviation broker).

Technical service providers (hosting, database, authentication) process data on our behalf under data processing agreements.

If you sign in with Google, Google receives the data necessary for authentication.

Where recipients are located outside the EU/EEA, transfers are based on adequacy decisions or standard contractual clauses.

We use only technically necessary storage (e.g. to keep you signed in and remember your language). We do not use advertising or tracking cookies. Should this change, we will ask for your consent first.

We keep data for as long as your membership or request requires, and beyond that only as long as statutory retention periods apply (generally seven years for accounting records under § 132 BAO).

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please write to us by email. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).